Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-web@5.3.38
purl pkg:maven/org.springframework/spring-web@5.3.38
Next non-vulnerable version 6.1.21
Latest non-vulnerable version 7.0.8
Risk score 4.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-4wrc-f8pq-fpqp
Aliases:
CVE-2016-1000027
Pivotal Spring Framework contains unsafe Java deserialization methods Pivotal Spring Framework before 6.0.0 suffers from a potential remote code execution …
6.0.0
Vulnerable
GHSA-4gc7-5j7h-4qph
Aliases:
CVE-2024-38820
Spring Framework DataBinder Case Sensitive Match Exception The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-2rmj-mq67-h97g
Spring Framework DoS via conditional HTTP request ### Description Applications that parse ETags from `If-Match` or `If-None-Match` request headers are … CVE-2024-38809